Closed packet-rat closed 1 year ago
I'm having a hard time recreating this one still. (I haven't seen the "You do not have permission" message before.)
I have added the strict_tagname
keyword to the tag lookup to reduce potential mismatches against synonyms, etc.
Is this a consistent failure regardless of INI settings?
Strict Tag Name should be fine. What specific settings should I validate? Without release notes I have to guess at new additions/changes to the ini file (I do a diff and try to reconcile)
The only real settings that should impact this would be tag names and potentially org_id
(but not really, I'm just now testing this additional filter).
It crashes like this every single time?
Yes. Let me change the API User to Admin.
Changing the API Key user to a full Admin role cleared the issue. We use a “Sync User as Tagger” Role for all API Accounts:
This is helpful. Adding documentation detail for necessary MISP server permissions is now on the list.
Thank you! 😄
We’ve asked CIRCL to “fix” the Tag Editor Role. This Role doesn’t allow one to actually Edit Tags!
Clear Tags fails with two errors:
cannot convert dictionary update sequence element #0 to a sequence
MISP Error: (405, {'name': 'You do not have permission to use this
python3 misp_import.py -ct